this post was submitted on 07 Jul 2023
292 points (99.3% liked)
Technology
59329 readers
6303 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Can someone explain why VPN services can't protect people from that
https://www.techtarget.com/searchsecurity/news/252464873/Google-Triada-backdoors-were-pre-installed-on-Android-devices
Also, you're connecting to a nearby cell tower which then relays your connection to the wider web, with an exit point at your VPN provider.
If the nearby cell tower is compromised, they can try MITM attacks which might not need SSL authentication (e.g. you might have a backdoor on your device that does not require an external certificate to access it (in fact I would be surprised if it would)).
Doing this before would be illegal. Now it is legal.
MITM would break any remotely decent VPN. The article talks about being able to activate cameras and what not but offers no explanation of how. This would almost certainly require software to be installed on the target device. I don't see how this will accomplish any more than making it easier to get geolocation data.
The baseband firmware on your phone has access to all hardware resources and can be modified over the cellular connection without your cooperation or knowledge.
It can't be done by a third party without extreme effort. This requires the cell phone manufacturer to participate along with the cellular service company as well.
Sorry for the late reply but I'd just like to warn you that it doesn't take a lot of effort. It takes some time, some knowledge of programming, electronics and communication protocols and a few hundred $$$ of equipment. DIY cell phone tower